Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/aZxd5CRd4CS3mQ_8WAKgxKykUPI.roa
File:                     aZxd5CRd4CS3mQ_8WAKgxKykUPI.roa (raw, json)
Hash identifier:          ohvkZAW7urYz7D/7kZs2fGrZocVMn/25WRSsv9o4JV0=
Subject key identifier:   69:9C:5D:E4:24:5D:E0:24:B7:99:0F:FC:58:02:A0:C4:AC:A4:50:F2
Certificate issuer:       /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial:       01E950CE
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/aZxd5CRd4CS3mQ_8WAKgxKykUPI.roa
Signing time:             Sat 01 Jan 2022 06:02:26 +0000
ROA not before:           Sat 01 Jan 2022 06:02:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35614
IP address blocks:        94.124.166.0/24 maxlen: 24
                          2a0c:29c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32067790 (0x1e950ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
        Validity
            Not Before: Jan  1 06:02:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=699c5de4245de024b7990ffc5802a0c4aca450f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b1:a5:b3:5a:5a:79:e8:79:0c:71:4c:0e:e6:
                    9c:4b:9b:66:53:36:4a:2a:c7:76:b7:ed:61:8b:45:
                    42:ba:26:6d:28:25:3b:00:65:de:5e:bc:40:ba:b4:
                    05:c4:31:b1:ba:67:0d:17:b2:f6:a9:6a:ab:79:3b:
                    14:9d:9b:36:bd:12:cc:02:15:54:e1:bf:76:52:12:
                    6d:52:11:6f:2b:52:03:3e:e7:48:15:a0:85:b3:8c:
                    fe:1b:04:fc:7c:24:0e:52:6a:f9:a4:b8:d7:cb:8e:
                    1d:91:f3:ec:41:ba:14:fe:64:5f:9c:1b:e6:16:f8:
                    aa:b5:08:3f:14:8c:df:21:fc:a7:76:ad:7a:91:e1:
                    0a:5e:ea:5a:01:14:3a:4c:59:fd:d6:bf:48:ec:98:
                    e3:fc:a2:80:d8:9c:36:48:66:83:d5:f1:ab:ce:56:
                    f4:b3:32:d0:10:0b:bc:93:79:c5:67:00:ce:28:92:
                    8d:88:dd:6d:78:c3:b8:fc:62:10:8c:9c:3e:da:96:
                    f8:11:b3:69:eb:25:a3:cb:20:cd:10:54:d2:d3:23:
                    c2:b5:90:46:1f:31:07:57:85:d6:bc:20:78:cb:63:
                    2d:1a:35:c2:17:7b:65:70:87:11:de:74:b8:ac:b6:
                    08:d2:05:37:87:6f:4c:6a:92:95:ef:35:4e:46:8b:
                    6d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9C:5D:E4:24:5D:E0:24:B7:99:0F:FC:58:02:A0:C4:AC:A4:50:F2
            X509v3 Authority Key Identifier:
                keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/aZxd5CRd4CS3mQ_8WAKgxKykUPI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.124.166.0/24
                IPv6:
                  2a0c:29c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:d3:0a:92:ed:af:bb:da:c1:df:c3:36:a6:59:ea:ac:f5:fa:
         70:c7:cb:b7:34:09:78:1b:01:74:69:f1:1c:5a:6f:45:85:ae:
         f7:28:27:02:a6:82:8a:ac:3f:d4:0d:21:ef:fc:7b:88:59:d1:
         b7:ed:59:af:93:42:58:60:18:2f:9c:29:a1:c1:e8:a5:b1:8c:
         7e:d3:1c:1c:ac:7b:b7:c2:4c:2e:54:61:5d:80:be:c8:19:79:
         dd:3b:f2:b4:96:63:54:a6:d1:7d:18:25:d9:13:1d:5f:b8:c0:
         33:23:1a:a1:b2:a4:fa:dc:a5:5f:ff:3e:02:91:cf:66:0e:c6:
         4d:c3:2f:e6:5e:5b:6b:ce:90:fb:b2:48:f5:08:00:72:30:7e:
         8c:09:aa:f5:f0:3d:2d:12:e8:42:b8:b0:59:7c:1b:86:22:7b:
         81:f3:f7:39:cc:81:06:18:b1:18:84:4d:5b:2b:65:17:ca:0b:
         e4:e1:7d:12:c0:1d:0d:83:d9:3b:9b:ad:1e:55:7e:54:9c:9d:
         54:c9:70:5b:1a:69:71:41:67:66:05:87:63:7b:92:6e:ad:9a:
         00:2b:40:13:a0:bf:7a:de:0c:17:13:f5:f6:31:0f:4b:f8:a6:
         b1:97:21:35:e0:e5:53:94:ab:8b:ba:84:53:a7:c5:66:72:37:
         89:f5:b0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----